www.ateliernovako.ca
Issued by R3
About this certificate
This digital certificate with serial number 04:df:ec:7e:46:e5:16:6a:ec:ac:f7:fc:1a:5b:ce:7e:24:ff was issued on by Let's Encrypt.
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.ateliernovako.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:df:ec:7e:46:e5:16:6a:ec:ac:f7:fc:1a:5b:ce:7e:24:ffSerial Number (int): 424646465024738538878520239627929642738943
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 57:fe:9b:c3:bf:ad:38:a1:9d:3a:34:50:ae:bd:65:63:38:d5:3d:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c3:92:8a:67:d5:cd:02:61:d4:aa:fc:d0:59:1d:48:94:f5:c9:bd:f5
Fingerprint (sha256): 2f:03:7d:63:31:42:51:d5:6e:b7:ee:7a:41:98:6b:cd:da:03:1f:80:29:14:89:65:dc:77:1e:da:f5:4a:70:40
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.ateliernovako.ca
15
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ateliernovako.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aberga.com.usachimp.com
arbitrageist.com
dallasnissan.com
footforvip.com
healthandsafetyconsultants.com
helpdesk.wearelegence.com
lionslandscape.net
massage4vip.com
nothingspecialsoap.com
ondemandrealty1.net.dome-dwell.com
organicmastery.com
sacoolingtowers.com
sanantonioman.net
webstpete.com.homeschoolweb3.com
www.ateliernovako.ca
arbitrageist.com
dallasnissan.com
footforvip.com
healthandsafetyconsultants.com
helpdesk.wearelegence.com
lionslandscape.net
massage4vip.com
nothingspecialsoap.com
ondemandrealty1.net.dome-dwell.com
organicmastery.com
sacoolingtowers.com
sanantonioman.net
webstpete.com.homeschoolweb3.com
www.ateliernovako.ca
Other certificates including the domain name ateliernovako.ca
(limited to 100 certificates)
www.ateliernovako.ca
ateliernovako.ca
www.ateliernovako.ca
www.ateliernovako.ca
www.ateliernovako.ca
www.ateliernovako.ca
www.ateliernovako.ca
liquidtraining.com.ateliernovako.ca
ateliernovako.ca
www.ateliernovako.ca
www.ateliernovako.ca
ateliernovako.ca
ateliernovako.ca
ateliernovako.ca
www.ateliernovako.ca
ateliernovako.ca
ateliernovako.ca
ateliernovako.ca
ateliernovako.ca
gamersground.ca
www.ateliernovako.ca
ateliernovako.ca
www.ateliernovako.ca
www.ateliernovako.ca
www.ateliernovako.ca
www.ateliernovako.ca
www.ateliernovako.ca
liquidtraining.com.ateliernovako.ca
ateliernovako.ca
www.ateliernovako.ca
www.ateliernovako.ca
ateliernovako.ca
ateliernovako.ca
ateliernovako.ca
www.ateliernovako.ca
ateliernovako.ca
ateliernovako.ca
ateliernovako.ca
ateliernovako.ca
gamersground.ca
www.ateliernovako.ca
Certificate
The complete raw certificate details for www.ateliernovako.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgISBN/sfkblFmrsrPf8GlvOfiT/MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA4MjQwNDE5MDNaFw0yMzExMjIwNDE5MDJaMB8xHTAbBgNVBAMT FHd3dy5hdGVsaWVybm92YWtvLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA8RGoG6AWHSe4/OtFe32zu2wjLCxWDPjta4PvbYVVTpjYnVE8TBTEZKiC JYT3S1IY8yrijCeUjH63TXyIjwCz6qmn+JjySfljdise4lc2FFOq8N/qD/OEQKE4 uHQ/WK0z62qi/DxJQohb6OZqrnQu9i1uH4GZ9oajzxWltERtX8jtf26yBB/umLCh Mtxq2iFar2lNWo5fNDad0rOPgMCVsCwTepx5xxTJppgBuOba7jnyo6+bkA6iNzuY fp/jCbPdHEln4di7KYnQmToWkeIW5i9jl1HS1cU7G/gbP7o1bPUG//uAb15elzx7 x6RVmJ5fy9cltjMiP/QfIAD/r6a3LQIDAQABo4IDYzCCA18wDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBRX/pvDv604oZ06NFCuvWVjONU9SDAfBgNVHSMEGDAWgBQULrMX t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0 dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu Y3Iub3JnLzCCAWoGA1UdEQSCAWEwggFdghdhYmVyZ2EuY29tLnVzYWNoaW1wLmNv bYIQYXJiaXRyYWdlaXN0LmNvbYIQZGFsbGFzbmlzc2FuLmNvbYIOZm9vdGZvcnZp cC5jb22CHmhlYWx0aGFuZHNhZmV0eWNvbnN1bHRhbnRzLmNvbYIZaGVscGRlc2su d2VhcmVsZWdlbmNlLmNvbYISbGlvbnNsYW5kc2NhcGUubmV0gg9tYXNzYWdlNHZp cC5jb22CFm5vdGhpbmdzcGVjaWFsc29hcC5jb22CIm9uZGVtYW5kcmVhbHR5MS5u ZXQuZG9tZS1kd2VsbC5jb22CEm9yZ2FuaWNtYXN0ZXJ5LmNvbYITc2Fjb29saW5n dG93ZXJzLmNvbYIRc2FuYW50b25pb21hbi5uZXSCIHdlYnN0cGV0ZS5jb20uaG9t ZXNjaG9vbHdlYjMuY29tghR3d3cuYXRlbGllcm5vdmFrby5jYTATBgNVHSAEDDAK MAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ALc++yTfnE26dfI5 xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABiiX7V54AAAQDAEcwRQIgEfWUbDYgvwuv Y4N0pMWuYal21U5S6Fk3eUt+kF96lxcCIQCQolVKVZwER8Vt/Ll09O10w+xXgsxN 9TBdoayl8sDDhQB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAAB iiX7V6gAAAQDAEcwRQIhAI/qvQ72xaYwFtFkeulFRMenQUIpQb3/U/DrRaOdZUYe AiBuUXWIUgYP5LvdhvYbalEdDmIUSP+iXLxOxmfm5GNeQTANBgkqhkiG9w0BAQsF AAOCAQEAiA3BDzmYrJGNQl5xJmJSGs2kPRULPquhpRWuTHcae+1n7yeVcHLwZ7ly T45VoYYyv4Fxq/cTKhkWfPUVQ/+d46v2OxqP/0bWHb5Vl7FftqY5HB2ZxD8gQLtw 25tDV7hmIKsYezjTaUbwxMpz4lpkCF2/OJ+lPfSQxQNwdlBIYdksbONXcudh3kHE s/ORM0wILKxdpQfkMyFP/CpqDR/OuybV7AYYdyfWWNEeZnEHblccqCTRubF+C0QC bQSXP2tFSHd5vlt6USbHdeDcCwWWWpKEWGPFAwiCvDtaI411KzzYcsMoCUfN/u1e dMg1J83Sn15CZybJWUYJOAxAOzhlDA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RGoG6AWHSe4/OtFe32z u2wjLCxWDPjta4PvbYVVTpjYnVE8TBTEZKiCJYT3S1IY8yrijCeUjH63TXyIjwCz 6qmn+JjySfljdise4lc2FFOq8N/qD/OEQKE4uHQ/WK0z62qi/DxJQohb6OZqrnQu 9i1uH4GZ9oajzxWltERtX8jtf26yBB/umLChMtxq2iFar2lNWo5fNDad0rOPgMCV sCwTepx5xxTJppgBuOba7jnyo6+bkA6iNzuYfp/jCbPdHEln4di7KYnQmToWkeIW 5i9jl1HS1cU7G/gbP7o1bPUG//uAb15elzx7x6RVmJ5fy9cltjMiP/QfIAD/r6a3 LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 424646465024738538878520239627929642738943 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-24 04:19:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 04:19:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ateliernovako.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30432138326059144569673738228470524650578867908655288020638665233798355958231309914065755383204271327056484946056195786648666298073019168490686868174031320131664398388651624607756293793983606863604523290749855138501860589685943883838378169308135338934052634132037767219007547812912869414927916008551220750495965550620655145420138601357538252538465848380086365137600826697848179402651460045265845109698824477828158296040929565352738767593364826121570429273906589460165370287377277769958113234641900789040811222566261421656304852068911026653983472646842413613808829609521116057854702484558262933317059794013227070175021 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 57fe9bc3bfad38a19d3a3450aebd656338d53d48 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (353 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberga.com.usachimp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageist.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasnissan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footforvip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthandsafetyconsultants.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.wearelegence.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionslandscape.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massage4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nothingspecialsoap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondemandrealty1.net.dome-dwell.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicmastery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacoolingtowers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantonioman.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webstpete.com.homeschoolweb3.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ateliernovako.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a25fb579e0000040300473045022011f5946c3620bf0baf638374a4c5ae61a976d54e52e85937794b7e905f7a971702210090a2554a559c0447c56dfcb974f4ed74c3ec5782cc4df5305da1aca5f2c0c385007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a25fb57a800000403004730450221008feabd0ef6c5a63016d1647ae94544c7a741422941bdff53f0eb45a39d65461e02206e51758852060fe4bbdd86f61b6a511d0e621448ffa25cbc4ec667e6e4635e41 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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